"The cybersecurity reality we live in now is teenagers are running around in organized crime gangs with digital bazooka’s. They probably have a better asset inventory of your network than you, and they don’t have to wait 4 weeks for 38 people to approve a change request for patching 1 thing." If you think that patching critical public facing infrastructure within 24hrs is not a realistic goal then tell me why! Despite all the security awareness we have here in 2023, all the new fancy tools we have, and all the celebration of coordinated government take downs of threat actor groups, cybercrime gangs are still on the rise hitting more companies and making more money than ever this year. You need to be able to identify and patch something like CitrixBleed within 24 hours — if you cannot, there is a very real possibility it isn’t the ideal product fit for your company due to the level of risk it poses, and you need to rethink if the architecture and look for a solution you can manage. The LockBit ransomware group has assembled a strike team to breach banks, law firms and governments and I don't see this stopping anytime soon. Follow this link for Kevin Beaumont's @GossiTheDog deeper dive into the topic: doublepulsar.com/lockbit-ran…